Privacy Policy

What personal data this website collects, why it’s needed, and what rights you have. Short and in plain words.

Last updated: 12 October 2026

1. Who looks after your data

The controller of your personal data is Darja Polášková, trading as Lily Bailey (registered seat: Bělkovice-Lašťany 404, 783 16 Bělkovice-Lašťany, Czech Republic, Business ID / IČO: 21736928). I handle personal data in line with the GDPR and Czech law, and I only collect what I genuinely need. For anything related to your data, write to [email protected].

2. What I collect and why

  • Newsletter. Your email address and the record of your sign-up and confirmation. I use it to send occasional emails about brands, design and my work. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
  • Enquiries. Your name, email address, phone number and any project details you share by email or through the website. I use them to reply, offer a consultation and prepare a proposal. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and my legitimate interest in answering your message (Art. 6(1)(f) GDPR).
  • Working together. Your name or company name, billing address, Business ID / VAT ID, bank details and project correspondence. I use them to deliver the services and issue valid invoices. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legal obligations under Czech tax and accounting law (Art. 6(1)(c) GDPR).
  • Visiting the website. When the site loads, the hosting provider processes your IP address and basic technical details of the request to deliver the page and protect it from abuse. Legal basis: legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

3. Cookies and analytics

This website does not use cookies or advertising trackers, so there is no cookie banner. To understand how the site is used, I rely on Cloudflare Web Analytics, which counts visits, pages and referring sites without cookies and without identifying you. Legal basis: my legitimate interest in knowing how the website performs (Art. 6(1)(f) GDPR). Fonts and images are served from the website itself.

4. Who helps me process the data

I never sell your data. To run my business, I rely on a few trusted providers who process data only on my behalf and only to the extent necessary:

  • MailerLite (UAB MailerLite, Lithuania, EU): newsletter subscribers and sending.
  • Cloudflare (Cloudflare, Inc.): hosting, delivery and cookieless analytics of this website.
  • jsDelivr: delivers a small script that makes scrolling smoother.
  • Google Workspace: email, calendar and file storage.
  • Accounting software: invoicing and tax compliance.
  • Design and project tools such as Adobe Creative Cloud and Figma, when we work on your project.

Where data is transferred outside the EU/EEA, it is protected by appropriate safeguards, such as the EU–US Data Privacy Framework or standard contractual clauses.

5. How long I keep it

  • Newsletter: until you unsubscribe or withdraw your consent.
  • Enquiries: for up to three years after our last contact, unless they lead to a project.
  • Project files: archived for reference and my portfolio, unless you ask me to delete them (within the limits of the agreed usage rights).
  • Invoices and accounting records: for 10 years, as Czech tax law requires.
  • Technical data processed by the hosting provider: only briefly, according to the provider’s own rules.

6. Your rights

  • Access: ask for a copy of the data I hold about you.
  • Rectification: ask me to correct inaccurate data.
  • Erasure: ask me to delete your data, unless I’m legally required to keep it (for example on invoices).
  • Restriction and portability: ask me to limit how I use your data, or to hand it over in a portable format.
  • Objection: object to processing based on legitimate interest.
  • Withdrawing consent: unsubscribe from the newsletter at any time via the link in every email or by writing to me.
  • Complaint: lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz).

7. Changes to this policy

If anything about how I handle data changes, I’ll update this page. The current version is always the one published here.

back to homepage